cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1269
Views
5
Helpful
6
Replies

DFM: sysConfigChangeTrap:InformAlarm

zengxing
Level 1
Level 1

I keep receiving sysConfigChangeTrap:InformAlarm alert from DFM. However, when I check the configuration file and change audit, there is no change recorded. What is causing this event to be raised?

6 Replies 6

miheg
Level 5
Level 5

Maybe the device sends a trap but no syslog? Or the syslog message doesn't make it to the server.

Then DFM would know about a possible cahnge and RME would not.

You may wish to change the config (the banner or something) and see if RME sees this.

Cheers,

Michel

David Stanford
Cisco Employee
Cisco Employee

Is this happening for a specific device type or multiple types?

It can happen on any device.

Does RME see the same via syslog?

Keep in mind that there are multiple situations that cause (a) change trap(s) e.g. a shut - no shut on an interface and no config change is visible.

Cheers,

Michel

Just by entering config mode you can generate a config change notification. It doesn't have to make an actual change.

w.kuhn
Level 1
Level 1

my guess...

You have 'snmp enable traps config' statement on device. you don't need to make any changes to device simply just 'conf t' and 'exit' would trigger the trap to dfm and not show any changes in RME config management.

You can test if this is the case by doing 'debug snmp packets' on device and do the above.

Cheers

Will

Review Cisco Networking for a $25 gift card